CVE-2015-1651
HighSummary
A use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document.
Risk Assessment
Attackers can exploit this vulnerability to gain control over the victim's system, posing a serious threat to the organization's data security.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to limit the opening of unknown Office documents.
Other vulnerabilities in Microsoft Word 2007 SP3, Word Viewer, Office Compatibility Pack SP3
See all- CVE-2014-6335High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document.
- CVE-2014-6334High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted Office document.
- CVE-2014-6333High
Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 have a vulnerability that allows remote attackers to execute arbitrary code via a crafted Office document.
Original NVD description (English source)
Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."